White, Daniel E. (GSFC-770.0)[NICS] via FreeIPA-users wrote:
Yes, but the configuration described on the FreeIPA page is
"Legacy" -
(
https://www.mediawiki.org/wiki/Extension:Auth_remoteuser#Legacy_parameters
) - which says, "You can still use all legacy parameters from versions
prior v2.0.0, but their usage is deprecated in favour of the new parameters"
Ok, you may need to use it as a general roadmap than a detailed guide I
guess.
The basic idea IIRC is you'd use mod_auth_gssapi to do the
authentication. This sets REMOTE_USER in Apache. According to
https://github.com/modauthgssapi/mod_auth_gssapi/issues/170 it may
already have the realm stripped off.
Then you use this mediawiki plugin to do whatever else you need: account
creation, etc.
It says here (
https://www.freeipa.org/page/Contribute/Documentation )
"This project site is running on famous mediawiki engine".
I am guessing you use FreeIPA to authenticate and I am guessing it is
running a current version of everything.
The freeipa wiki uses the Fedora Account System for authentication.
rob
Please share.
*______________________________________________________________________________________________*
* *
*Daniel E. White**
**daniel.e.white(a)nasa.gov <mailto:daniel.e.white@nasa.gov>***
*NICS Linux Engineer
NASA Goddard Space Flight Center
8800 Greenbelt Road
Building 14, Room E175
Greenbelt, MD 20771***
*Office: (301) 286-6919***
*Mobile: (240) 513-5290*
*From: *Rob Crittenden <rcritten(a)redhat.com>
*Date: *Tuesday, February 18, 2020 at 12:04
*To: *FreeIPA users list <freeipa-users(a)lists.fedorahosted.org>
*Cc: *Daniel White <daniel.e.white(a)nasa.gov>
*Subject: *[EXTERNAL] Re: [Freeipa-users] Looking for an update to
"Setting up MediaWiki to run against FreeIPA"
White, Daniel E. (GSFC-770.0)[NICS] via FreeIPA-users wrote:
Please ?
https://www.freeipa.org/page/Setting_up_MediaWiki_to_run_against_FreeIPA
It would appear that this page is over 6 years old.
The link for the Auth_remoteuser tar-ball does not exist. and the
extension installation instructions are obsolete.
https://www.mediawiki.org/wiki/Extension:Auth_remoteuser
perhaps?
rob
_______________________________________________
FreeIPA-users mailing list -- freeipa-users(a)lists.fedorahosted.org
To unsubscribe send an email to freeipa-users-leave(a)lists.fedorahosted.org
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedoraho...